Sure, which is what I do. But the point is that this is very much internal use and rolling my own CA for it is a nightmare.